What Is Claimed Is: 



1 . A method to facilitate secure messaging, comprising: 
creating a message at an origin; 

computing a digest of the message; 
signing the digest using an origin private encryption key; 
sending the message and the digest to a queue for deUvery to a recipient; 
receiving the message and the digest at the queue; 
verifying that the digest was signed at the origin by using an origin pubhc 
encryption key, whereby the origin cannot deny creating the message; and 
if the digest is verified as being signed at the origin, 

placing the message and digest on the queue, and 
notifying the recipient that the message is available. 

2, The method of claim 1 , further comprising: 

generating a request at the recipient to receive the message from the queue; 
creating a signature for the request using a recipient private encryption 

key; 

sending the request and the signature to the queue; 
validating the request at the queue using the signature and a recipient 
pubUc encryption key; and 

if the request is valid, 

dequeueing the message from the queue, 

sending the digest to the recipient; 

signing the digest at the recipient using the recipient private 
encryption key creating a signed digest; 

returning the signed digest to the queue, 
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14 validating the signed digest at the queue using the recipient 

1 5 public encryption key, whereby the recipient ca3mot deny 

16 requesting to receive the message, and 

17 if the signed digest is valid, sending the message to the 

18 recipient. 

1 3 . The method of clahn 2, further comprising passing the message 

2 and the digest through a plurality of queues between the origin and the recipient, 

3 whereby the recipient and the origin are subscribers of different queues. 

1 4. The method of claim 3, further comprising passing the message 

2 and the digest through a plurality of databases, wherein each database in the 

3 plurality of databases includes at least one queue of the plurality of queues. 

1 5 . The method of claim 2, wherein the origin public encryption key 

2 and the origin private encryption key are a key pair of a public key encryption 

3 system. 

1 6. The method of claim 2, wherein the recipient public encryption key 

2 and the recipient private encryption key are a key pair of a public key encryption 

3 system. 

1 7. The method of claim 2, wherein computing the digest includes 

2 using one of message digest 2 (MD2), message digest 4 (MD4), message digest 5 

3 (MD5), secure hash algorithm (SHA), and secure hash algorithm 1 (SHAl). 
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1 8. A computer-readable storage medium storing instructions that 

2 when executed by a computer cause the computer to perform a method to 

3 facilitate secure messaging, the method comprising: 

4 creating a message at an origin; 

5 computing a digest of the message; 

6 signing the digest using an origin private encryption key; 

7 sending the message and the digest to a queue for delivery to a recipient; 

8 receiving the message and the digest at the queue; 

9 verifying that the digest was signed at the origin by using an origin public 

1 0 encryption key, whereby the origin cannot deny creating the message; and 

1 1 if the digest is verified as being signed at the origin, 

12 placing the message and digest on the queue, and 

1 3 notifying the recipient that the message is available. 

1 9. The computer-readable storage medium of claim 8, the method 

2 further comprising: 

3 generating a request at the recipient to receive the message from the queue; 

4 creating a signature for the request using a recipient private encryption 

5 key; 

6 sending the request and the signature to the queue; 

7 validating the request at the queue using the signature and a recipient 

8 public encryption key; and 

9 if the request is valid, 

1 0 dequeueing the message from the queue, 

1 1 sending the digest to the recipient, 

12 signing the digest at the recipient using the recipient private 

1 3 encryption key creating a signed digest, 
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14 returning the signed digest to the queue, 

1 5 validating the signed digest at the queue using the recipient 

1 6 pubUc encryption key, whereby the recipient cannot deny 

17 requesting to receive the message, and 

1 8 if the signed digest is vaUd, sending the message to the 

19 recipient. 

1 1 0. The computer-readable storage medium of claim 9, the method 

2 further comprising passing the message and the digest through a plurality of 

3 queues between the origin and the recipient, whereby the recipient and the origin 

4 are subscribers of different queues. 

1 11. The computer-readable storage medium of claim 1 0, the method 

2 farther comprising passing the message and the digest through a plurality of 

3 databases, wherein each database in the plurality of databases includes at least one 

4 queue of the plurality of queues. 

1 1 2. The computer-readable storage medium of claim 9, wherein the 

2 origin public encryption key and the origin private encryption key are a key pair of 

3 a public key encryption system. 



1 13. The computer-readable storage medium of claim 9, wherein the 

2 recipient public encryption key and the recipient private encryption key are a key 

3 pair of a public key encryption system, 

1 14. The computer-readable storage medium of claim 9, wherein 

2 computing the digest includes using one of message digest 2 (MD2), message 
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digest 4 (MD4), message digest 5 (MD5), secure hash algorithm (SHA), and 
secure hash algorithm 1 (SHAl). 



1 1 5, An apparatus to facilitate secure messaging, comprising: 

2 a first creating mechanism that is configured to create a message at an 

3 origin; 

4 a computing mechanism that is configured to compute a digest of the 

5 message; 

6 a first signing mechanism that is configured to sign the digest using an 

7 origin private encryption key; 

8 a first sending mechanism that is configured to send the message and the 

9 digest to a queue for delivery to a recipient; 

1 0 a receiving mechanism that is configured to receive the message and the 

1 1 digest at the queue; 

12 a verifying mechanism that is configured to verify that the digest was 

13 signed at the origin by using an origin public encryption key, whereby the origin 

1 4 cannot deny creating the message; 

1 5 a placing mechanism that is configured to place the message and digest on 

16 the queue; and 

1 7 a notifying mechanism that is configured to notify the recipient that the 

1 8 message is available. 

1 16. The apparatus of claim 1 5, further comprising: 

2 a generating mechanism that is configured to generate a request at the 

3 recipient to receive the message from the queue; 

4 a second creating mechanism that is configured to create a signature for 

5 the request using a recipient private encryption key; 
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6 a second sending mechanism that is configured to send the request and the 

7 signature to the queue ; 

8 a first validating mechanism that is configured to validate the request at 

9 the queue using the signature and a recipient public encryption key; 

1 0 a dequeueing mechanism that is configured to dequeue the message from 

1 1 the queue; 

12 a third sending mechanism that is configured to send the digest to the 

13 recipient; 

1 4 a second signing mechanism that is configured to sign the digest at the 

1 5 recipient using the recipient private encryption key creating a signed digest; 

16 a returning mechanism that is configured to return the signed digest to the 

17 queue; 

1 8 a second validating mechanism that is configured to validate the signed 

1 9 digest at the queue using the recipient public encryption key, whereby the 

20 recipient cannot deny requesting to receive the message; and 

21 wherein the third sending mechanism is further configured to send the 

22 message to the recipient. 

1 1 7. The apparatus of claim 1 6, further comprising a passing 

2 mechanism that is configured to pass the message and the digest through a 

3 plurality of queues between the origin and the recipient, whereby the recipient and 

4 the origin are subscribers of different queues. 

1 18. The apparatus of claim 17, wherein the passing mechanism is 



2 fiirther configured to pass the message and the digest through a plurality of 

3 databases, wherein each database in the plurality of databases includes at least one 

4 queue of the plurality of queues. 
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1 19. The apparatus of claim 1 6, wherein the origin public encryption 

2 key and the origin private encryption key are a key pair of a public key encryption 

3 system. 

1 20. The apparatus of claim 1 6, wherein the recipient public encryption 

2 key and the recipient private encryption key are a key pair of a public key 

3 encryption system, 

1 21 . The apparatus of claim 1 6, wherein computing the digest includes 

2 using one of message digest 2 (MD2), message digest 4 (MD4), message digest 5 

3 (MD5), secure hash algorithm (SHA), and sepure hash algorithm 1 (SHAl). 
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